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^ . Abstract 



How to construct an ideal multi-secret sharing scheme for general access structures 



^ ■ is difficult. In this paper, we solve an open problem proposed by Spiez et al.recently 

[Finite Fields and Their Application, 2011(17) 329-342], namely to design an algo- 



rithm of privileged coalitions of any length if such coalitions exist. Furthermore, in 
terms of privileged coalitions, we show that most of the existing multi-secret shar- 
ing schemes based on Shamir threshold secret sharing are not perfect by analyzing 
O ■ Yang et al.'s scheme and Pang et al.'s scheme. Finally, based on the algorithm men- 

tioned above, we devise an ideal multi-secret sharing scheme for families of access 
structures, which possesses more vivid authorized sets than that of the threshold 
scheme. 



Keywords: {t, n) threshold, track, access structure, minimal privileged coalitions, 
■ multi-secret sharing 



^ ! 1. Introduction 

Single-secret sharing schemes(SSSS). A secret sharing scheme is a method to 
^ I distribute a secret among a set P of participants, which includes a pair of efficient 

algorithms: a distribution algorithm and a reconstruction algorithm, implemented 
by a dealer and some participants. The distribution algorithm allows a dealer to 
split a secret s into different pieces, called shares, and distribute them to par- 
ticipants. The reconstruction algorithm is executed by the authorized subsets of 
parties who are able to reconstruct the secret by using their respective shares. The 
collection of these authorized sets of participants is called the access structure, 
r c 2^. A group of participants is called a minimal authorized subsets if they 
can recover the secret with their shares, and any of its proper subgroups cannot 
do so. Then, the access structure is determined by the family of minimal autho- 
rized subsets, (T)min- The notion of secret sharing was introduced by Shamir [1] 
and Blakley [2] , who considered the only schemes with a {t, n)-threshold access 
structure formed by the set of authorized subsets of participants is the set of all 
subsets of size at least t, for some integer t. In 1987, Ito et al.[3] proved that there 
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exists a secret sharing scheme for any access structure which is more general than 
the threshold ones. Afterwards, secret sharing schemes have been widely employed 
in the construction of more elaborate cryptographic primitives and several types of 
cryptographic protocols(see [4-8]). 

A secret sharing scheme is called perfect if any non-authorized subset of par- 
ticipants have no information about the secret, and ideal if the shares are of the 
same size as that of the secret. An ideal secret sharing scheme is well-known to 
be the best efficiency that one can achieve with lowest storage complexity and the 
communication complexity [9]. 

Multi-secret sharing schemes (MSSS). Multi-secret sharing can be seen as a nat- 
ural generahzation of single secret sharing schemes. In 1994, Blundo et al. [10] stud- 
ied the more general case in which the set of participants share more than one secret 
and different secret is related to different access structure. Let T = (Fq, . . . , Tm-i) 
be the m-tuple of access structures on P and let 5*0 x 5*1 x ■ • • x S'm_ibe the set 
from which the secrets are chosen, where for any < j < m — 1, each secret 
Sj to be shared is chosen in Sj. In the definition of a perfect multi-secret shar- 
ing scheme, an m-tuple of secrets (sq, . . . , Sm-i) G 5*0 x • • • x Sm-i is shared in 
an m-tuplc (Fq, .... T„i-i) of access structures on P in such a way that, for each 
< j < m — 1, the access structure Tj is the set of all subsets of P that can 
recover secret Sj. A perfect multi-secret sharing scheme is defined in [10] such that 
the following requirements are satisfied. 

Definition 1.1. Let T = {Tq, . . . , Tm-i} be an m-tuple of access structures on the 
set of participants P = {Pi, . . . , Pn}. A multi-secret sharing scheme for F — 
{Tq, . . . , r^_i} is a sharing of the secrets (sq, . . . , Sm-i) & Sq x ■ ■ ■ x Sm-i in such 
a way that, for < j < m — 1, 

(1) Correctness requirement: Any subset A P of participants enabled to recover 
Sj can compute sj. Formally, for all A e Tj, it holds H{Sj \ A) = 0, 

(2) Security requirement: Any subset AC. P of participants not enabled to recover 
Sj, even knowing some of the other secrets, has no more information on Sj 
than that already conveyed by the known secrets. Formally, for all A Fj and 
TC{Sor- - , Sm-i}\{Sj}, It holds H{Sj \ AT) = H{Sj \ T). 

So far. Multi-secret sharing are widely applied not only in the field of informa- 
tion security but also the theories and models of secret sharing schemes[ll-19]. 

Our results. Although fruitful results for the multi-secret sharing have been ob- 
tained, it is still difficult to devise ideal multi-secret sharing schemes for general ac- 
cess structures. In this paper, by using the theory of privileged coalitions[20,21], we 
point out that several multi-secret sharing schemes (see[13-18])based on Shamir's 
threshold scheme are not perfect, and thus are not ideal. In[20] Spiez et al. ob- 
tained an algorithm to construct the privileged coalitions of maximal length and 
put forward how to design an algorithm of privileged coalitions of any length if 
such coalitions exist. Motivated by these concers, we solve this open problem and 
devise an ideal multi-secret sharing scheme(IMSSS) for families of access structures 
based on the algorithm mentioned above. Finally, we compare our scheme with 
two additional schemes [13, 14] according to their performance analysis. 
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The rest of the paper is organized as follows: In Section 2, the basic definitions 
of secret Shamir's secret sharing scheme and privileged coalitions are reviewed, an 
algorithm of privileged coalitions of any length is designed as well. In Section 3 and 
4, based on theories of privileged coalitions and corresponding algorithm, we shall 
present our ideal multi-secret sharing scheme and make some discussions. Finally, 
some remarks are given in the conclusion Section. 

2. Preliminciries 

2.1. Shamir's secret sharing scheme 

In a {t,n) threshold secret shciring scheme(a scheme with n participants 
and threshold t), where 2 < t < n, a dealer does not disclose a secret data to the 
participants but only distributes n shares amongest them in such a way that at 
least t or more participants can collectively efficiently reconstruct the secret but 
no coalition of less than t participants can obtain noting about the secret. 

In the paper, we consider Shamir's secret shciring schemes [20] with the 
secret placed as a coefficient Oj of the scheme polynomial f{x) — aQ + aix + ■ — h 
at-ix*^^, where a = (ao, . . . , flt-i) G F^* (q is a prime power). For a fix f{x) and 
an j, such scheme is uniquely defined by a sequence L = {li,l2 ■ ■ ■ Jn) G Fq* of 
pairwise different public identities, allocated to participants, called in [20] a track. 
The shares yi — f{k) {I < i < n) assigned to participants are secret. 
Remcirk 1. Shamir's (t, n) threshold secret sharing and Shamir's secret sharing 
are different. A Shamir's {t, n) threshold secret sharing must be a Shamir's secret 
sharing, but a Shamir's secret sharing may not be a Shamir's {t, n) threshold secret 
sharing. 

In fact, the public identities L define the nxt matrix A(L) = il'') i<^<„ over 

Fq which gives the shares by A(L)a^ = y^. Since L is a track any coalition of t 
participants determines atxt non-singular Vandermonde submatrix of the matrix 
A(L) consisting of the corresponding rows of the matrix A(L), i.e., 

(i) all t X t submatriccs of A(L) are non-singular. 

A Shamir's secret sharing is a Shamir's {t, n) threshold secret sharing if and 
only if 

(ii) all (t — 1) X (t — 1) submatrices of the matrix obtained from the matrix A(L) 
by removing its j-th column are non-singular. 

The track L corresponding to such matrix A(L) satisfying two above conditions 
is called (t, j)— admissible[21]. 

Definition 2.1. Let < j < t — 1. // the track L G F^, where n > k, defines a 
Shamir's {t, n) threshold secret sharing with the secret placed as a coefficient aj 
of the scheme polynomial f{x) = ao + aix -|- • • • -|- at-ix^~^, then L is called a 
{t, j) — admissible track. 

Note that if the track L G is not admissible, then it contains a 

subtrack consisting of less than t participants which can reconstruct the secret by 
themselves, forming a privileged coalition [20]. 
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2.2. Minimal privileged coalition 

Definition 2.2. fj^ / Let r < t and fix j, < j < t — 1. A coalition ofr pariicipants 
L = {li,l2,--- Jr) £ is said to he a {t, j)— privileged coalition, if they can 
reconstruct the secret, placed as the coefficient aj of the scheme polynomial f{x) = 
ao + ttix + • • • + at-ix^~^ . 

Definition 2.3. Let r < t and fixj,0<j<t — 1. A coalition of r participants 
L = {h, hi' ■ ■ , Ir) £ F'^ is said to be a {t, j)— minimal privileged coalition, if L is 
a privileged coalition without any subtracks that can reconstruct the secret. 

Note that the tracks of length t, which can be extended by privileged coalitions 
of length r, can reconstruct the secrets placed as any coefficients of the scheme 
polynomial. Then we would have 

Definition 2.4. Fix j , < j < t—1. A coalition oft participants L = (/i, ^2, ■ ■ ■ , h) G 
Fg is said to be a {t, j) — unextended track, if L can not be extended by a (t, j)— privileged 
coalition. 

By Definition 2.3, the minimal authorized subsets of Shamir's secret sharing 
schemes are determined by minimal privileged coalitions and unextended tracks. 
Therefore, constructing minimal privileged coalitions become the key to the de- 
termination of the access structures. In order to devise an algorithm to obtain 
privileged coalitions, we will need the following theorem about the characteriza- 
tion of (t, j)— privileged coalitions whose proof can be found in[20]. 

Theorem 2.5. Assume that < j < t — 1, j < r < t — 1. Let L = (/i, /2, ■ ■ ■ Jr) G 
Fg be a track, and let t < q. Then L is a {t, j)— privileged coalition if and only if 

T^{L) = 0, for all u e {r - j, - ■ ■ ,t - 1 - j}, 

where t^^{L) denotes the elementary symmetric polynomial of total degree u. 

2. 3. Privileged coalitions of any length 

In this section, we solve an open problem proposed in [20] recently, namely to 
design an algorithm of privileged coalitions of any length if such coalitions exist. For 
simplicity, we will focus on the tracks whose value of each component is clamped to 
the range of {1, 2, ■ ■ ■ , A^}, and we call these coalitions privileged coalitions 

with respect to A^. Using Algorithm 1 we can obtain privileged coalitions 

with respect to A^ of length r over Fp {p is a odd prime). By Definition 2.3, for the 
given t, r with ^ < r < t — 1, we can obtain (t, j)— minimal privileged coalitions 
with respect to A^ of length r by detaching ('^I'^'"™) A^mm non-minimal privileged 
coalitions from privileged coalitions of length r, where Nmin denotes the 

number of privileged coalitions of the shortest length rmm- 

As an illustration, we investigate the Shamir's secret scheme with the number 
of participants n = 13 and threshold t = 7. In the appendix, we then present two 
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tables of (7, j)— minimal privileged coalitions with respect to N — 13 of any length 
if such coalitions exist. 
Algorithm 1 

Input positive integers t, r, j with t > 3, ^ <r<t — l,t — r<j<r — 1. 
Output all of the privileged coalitions of length r with respect to N 

over Fp. 

1. Compute the range of values for j, and set a r — j, b t — 1 — j . Take 
J is a set of all integers from a to b. 

2. Obtain all of the tracks of length r with respect to over Fp. 
2.1. B = (1, 2, • • • , n), for i ^ 1 to N 

2.1.1 Forj = z + ltoAr 

If B{j) > B{i) {B{j) denotes the elements of the j— th position 
of the array B), 
2.1.1.1 For A; = j + 1 to 
If B{k) > B{j) 

r—1 Nested loops are carried out in turn, then (• • • , B{k), B(j), B{i)) 

" V ' 

r 

is a track. 

3. Find (t, j)— privileged coalitions from the tracks obtained in Step 2 by means 
of the principle about Vieta theorem of high power equation. 

3.1. For i = 1 to 6- o + 1 

3.1.1. Set p J{i), and go through tracks that obtained in Step 2. 
Let C = 1. For j = 1 to r 

Set C^Cx{x + L(j)) 

3.1.2. Set/ <(— C, and select m as a vector whose components are 
coefficients of the expansion of f{x) in ascending power of x. 
Set s ■<— m(r — p + 1), then set Vp •<— mod{s,p). 

3.2. If Vp — 0, then return (L). 

3. An ideal multi-secret sharing scheme 

When the probability distributions over the secrets and shares are uniform, a 
secret sharing scheme is said to be ideal if all secrets and shares are the same size[19]. 
In this section we firstly define a (t-l)-tuple F = (Fq, . . . , Fi_2) of access structures 
and then we devise an IMSSS which reahzes such a (t-l)-tuple F = (Fq, . . . , Tt-2) 
of access structures. 

3.1. Definition of the access structures 

Let P = {Pi, . . . , Pn} be the set of participants, we firstly define such an (t-1)- 
tuple F = (Fq, . . . , rt-2) as follows: 
(1) {ToUn ^{ACP\\A\^ t}. 
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(2) {rj)min — Q P I is either a {t,j) — unextended track or a {t,j) — 

privileged coalition, (1 < J < t — 2)}. 

As each component of a track can be used as the identity of the participants, we 
can determine the minimal authorized subsets of (rj)„jj.„ for the secret placed as a 
coefficient aj of the scheme polynomial f{x) = + aix + ■ — h at-ix*~^ by getting 
both (t,j)-unextended track and (t,j)-privileged coalition using the Algorithm 1. 

Obviously, a subset A C P is likely to reconstruct more than one secret. For 
example, if A E Ti and A G Tj, then A can reconstruct not only Sj but also sj, 
where < i,j < t — 2 and i ^ j. 

Example 3.1 Let P = {^1,^2,^3,^4,^5,^6},^ = 5,g = 7. Without loss 
of generality, D distributes i to participant Pi for 1 < i < 6. It follows from 
algorithm 1 that (5,l)-privileged coalition over F7 is (1,2,5,6), (1,3,4,6) and 
(2,3,4,5); (5,2)-privileged coalition is (1, 2, 4), (3, 5, 6); (5,3)-privileged coalition 
is (1,2,5,6), (1, 3, 4, 6) and (2, 3, 4, 5), but without (t,j)-unextended track. Hence 
{t — l)-tuple r = (Fq, . . . , can be defined as follows: 

(ro)mm = {{-Pi, P2, P3, Pi, P5}, {Pi, P2, P3, Pi, P6}{Pl, P2, Pi, P5, Pq}, 

{Pl,P2,P3,P5,P6}.{Pl.P3,PuP^,-P6}-{P2^P?>^Pi-Po.P6}}, 
(ri)mm = (F3)mm = {{-Pi, ^3, P'l, Pq} , {Pi, -^2, -^5, P^} , {P2, P3, Pi, P5}} , 
(J'2)min = {{Pi, P2, Pi}, {P3, P5, Pq}}- 

3.2. Construction of the IMSSS 

3.2.1. Initialization phase 

Note that Sq, • • • , denote t-1 secrets to be shared, where (sq, • • • , ^1^2) ^ SqX 
• • • X St-2- The dealer D randomly chooses n pairwise different /j and assigns them 
to every participant Pi as their public identity, where k E F* for 1 < i < n. Then 
D computes the {t, j)-unextended track and {t, j)-privileged coalition by means of 
algorithm 1 for < j < t — 2. 

3.2.2. Distribute phase 

The dealer D performs the following steps: 

(1) Choose an integer Ot-i from F* and construct (t — l)th degree polynomial 
f{x) mod q, where < Sq, . . . , St-2, o-t-i < 9 as follows:/(x) — Sq + ■ — h 
St-2X^~'^ + at-ix^~^ mod q. 

(2) Compute iji = f{li) mod g for i = 1, 2 . . . , n and distribute them to every 
participant Pi as secret shares by a secret channel. 

3.2.3. Recovery phase 

Assume that (0 < j < t — 2). for any A G {Xj)min, if |^| = then any subset 
A G {Tj)min can reconstruct the secret Sj by solving equation system A(L^) = 
y^, where is corresponding track of A; if |A| <t and L = {li^jk^, ■ ■ ■ E F^ 

is a (t, j)-privileged coalition of A, let = (^n, ^ia, ■ ■ • , kr,kr+i, ■ ■ ■ ,kt) ^ -P^, then 
the participants in A can reconstruct the secret Sj by solving equation system 
A(L^) a^ = y^, where a = (sq, . . • ,st-2,«t-i) e -Pg, y = {Vh,- ■ ■,yit), and A(L^), 
A(L^) are alH x t matrix which can be specifically written as (I'f^) i<^<n . 
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4. Correctness and security proof 

In order to prove that our scheme is perfect, we need to introduce some re- 
sults on the generahzed the Vandermonde determinants. As usual, for a /c— tuple 
of indeterminates x = (xi, . . . ,Xk) and a A;— tuple of increasing non- negative in- 
tegers c = (ci, . . . ,Ck) we call 14(x) = det{{x1^)i<iy,^<k) generalized Vandermonde 
determinant. Write = (0, . . . , A; — 1). If c = then T4(x) equals the classical 
Vandermonde determinant V'(x) = Yli 



<i<j<k\^j ^i)- 

Theorem 4.1. The scheme presented in Section 3 is a perfect multi-secret sharing 
scheme. 

Proof. When j = due to the perfect property of the {t, n) secret sharing schemes, 
our scheme satisfies the two conditions of Definition 1.1. Now we consider that 
l<j<t-2. 

(1) If \A\ — t, then by solving equation system A(La) = y"^, the partic- 
ipants in A can obtain the unique solution Sj in terms of Cramer rule. If |v4| < t 
and L = (/.j^, li^, . . . , li,) G is a (t, j)-privilcgcd coalition of A, by Theorem 2.5, 
ra;(L) = 0, for all G {r - J, ■ ■ ■ , t - 1 - j). By Lemma 2[20], r,^(L) = for all 
a; e {r — j, • ■ ■ , t — 1 — j} if and only if 

Tt-i-j{L II u^) = for all m, 1 < m < t — r, (1 ) 

let u = {ui, . . . ,Ut-r) G be a track disjoint with L, and Um denotes the 

sequence obtained from u by removing the term Um- Let 



Vk 



fik) ^G{l,...,r} 
f{uk-r) ke{r + l,...,t} ' 



and let = (/jj, li^, . . . ,li^,ui, . . . , Ut-r) G F*, then Sj can be obtained by solving 
equation system A(L^) a^ = y^ 



1 



Sn = 



.lf+j+^V{U II u)Tt_i_,-(Lfe II u)yfc + 



^ (-l)fc+J-+V(L II Ufc_,)rt_i_,(L II nk-r)yk- (2') 

k=r+l 

By (l') and (2'), (t, j)-privileged coalition of A can compute the secret Sj. Hence, 
it holds that for all A G L^ , H{Sj | A) = 0. 

(2) II A ^ Vj, then 1^1 < t and is not a {t,j)— privileged coalition. In view 
of (1 ), there exists a m , where 1 < m < t — r such that rt„i^j(L || u^/) 7^ 0. 
Thus, the share of u^' is needed. By (2 ) we can obtain that the participants 

in A have no information on sj, even knowing some of the other secrets. Hence, 
it holds that H{Sj \ AT) = H{Sj \ T), where T denotes the secrets that A can 
compute. 

Therefore, according to Definition 1.1, the scheme is a perfect multi-secret shar- 
ing scheme. 
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As a consequence, our scheme is an ideal and perfect linear multi-secret sharing 
scheme. In 2004 and 2005, Yang et al.[13] and Pang et al.[14] proposed multi-secret 
sharing schemes based on Shamir's threshold secret sharing, respectively, which are 
relatively efficient with lower cost of computing due to the Lagrange interpolation 
operation that is employed in the process of schemes construction. However, the 
existence of the privileged coalitions and the Lagrange interpolation polynomial 
participants use will result in a fact that the union of less than t participants may 
compute the coefficients of the polynomial corresponding to secrets by solving equa- 
tion system, thereby obtaining further information about the secret. Consequently, 
both of the two schemes are not perfect, i.e., there is information leakages. Table 
1 is for the comparison among three schemes. 

Likewise, the multi-secret sharing schemes [15- 18] are not perfect, and thus are 
not ideal. 

Remark 2. The validity of the shares can be verified in a verifiable secret sharing 
scheme, thus participants are not able to cheat. Based on our scheme, we can 
further construct an ideal verifiable multi-secret sharing scheme by adding the 
existing verifiability methods where the intractability of discrete logarithm problem 
is frequently employed (see[15-18]). 

Table 1 The comparison of performance among three schemes 
Capability Our scheme Yang's scheme. Pang's scheme 



Multi-secret 


Yes 


Yes 


Yes 


Each participant holds only one share 


Yes 


Yes 


Yes 


Recover multi-secrets by Lagrange interpolating polynomials 


No 


Yes 


Yes 


Access structures corresponding to each secret is the same 


No 


Yes 


Yes 


Access structures possess more vivid authorized sets 


Yes 


No 


No 


The scheme is perfect 


Yes 


No 


No 


The scheme is ideal 


Yes 


No 


No 



5. Conclusions 

In this paper, we consider an ideal multi-secret sharing scheme based on the 
theories of minimal privileged coalitions and Shamir's secret sharing, where for a 
set of participants P — {Pi, . . . , P„}, each subset of Tj carries different target secret 
Sj ioT < j < t — 2. In particular, in order to obtain privileged coalitions, we devise 
an algorithm of privileged coalitions of any length if such coalitions exist. In real 
terms, we can integrate data into a database which obtained from the experiment 
for different value t in accordance with our needs, and then we can extract the 
results as identities of participants applied to the construction of the scheme for 
practical applications. 
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Table 2 The number of (7, j)-minimal privileged coalitions in the track 
(1, . . . , 13) over Fp for 1 < j < 5 



p 


i — 1 
J — J- 


i — 9 
J— ^ 


J— <J 


1— ZL 


J— c 


p 


i — 1 


i — 9 

J— ^ 


J— <J 


1— ZL 

J— 


J— f 






11/1 


71 


OQ 

yo 


1 Q9 

ioZ 


1 Q7 
io ( 


1 c; 
iO 


1 n 

iU 


1 1 
i i 


1 Q 

io 


u 


1 7 


iUl 


oy 


7fi 


79 


yo 


ioy 


io 


1 9 
iZ 


iU 


io 


u 


1 Q 


Qn 
yu 


Oo 


79 


( 


Q9 

y/ 


1 /I Q 

i4y 


1 Q 
io 


1 Q 
io 


Q 
O 


Q 
O 


n 
u 


/o 


79 


R1 
Di 


Oo 


Do 


oo 


1 c;i 

iOi 


1 9 
iZ 


Q 

y 


io 


1 Q 

io 


n 
u 


29 


60 


43 


51 


46 


26 


157 


14 


10 


13 


10 





31 


58 


51 


40 


39 


32 


163 


13 
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3 The (7, 3)-privilcgcd coalitions with the shortest length in the track (1, . . . , 13) over Fp 

{7 , 3)-yJri^dlogC(l coaUtioiis with tlio sliortesi lt~ii,a;th 

{12, tS, T), 1} {11, 11), :-!, 2| {9, 7, (), 1} 

111, 10, 7, 6} 

(13, 5, 4, 3, 1} {13, 9, 8, 5, 2} {10, 8, 7, 6, 2} 

{10, 9, 8, 6, 1} {13, 11, 8, 7, 1} 

{11, 4, 3, 2, 1} {11, 9, 7, 5, 1} {12, 9, 6, 4, 3} 

{9, 8, 5, 3, 1} 

{12, 10, 8, 5, 1} {7, 6, 4, 3, 2} 

{11, 9, 7, 6, 4} 

{10, 5, 4, 3, 2, 1}{12, 6, 5, 3, 2, 1} {11, 10, 9, 5, 3, 1} {13, 7, 5, 4, 2, 1}{12, 11, 6, 4, 2, 1} 

{13, 11, 9, 5, 2, 1} {11, 10, 7, 6, 2, 1}{11, 8, 6, 3, 2, 1} {12, 10, 8, 6, 5, 4}{13, 12, 11, 6, 5, 4} 

{11, 9, 8, 5, 4, 1}{13, 9, 8, 6, 4, 1}{11, 10, 8, 7, 4, 1}{12, 11, 10, 9, 4, 1}{12, 11, 8, 6, 5, 1} 

{13, 11, 10, 8, 6, 1}{13, 9, 5, 4, 3, 2}{12, 10, 8, 6, 3, 2} {10, 9, 8, 7, 3, 2}{13, 12, 10, 5, 4, 2} 

{12, 10, 8, 7, 4, 2}{12, 9, 8, 6, 5, 2} {13, 10, 8, 6, 5, 2, }{11, 9, 8, 7, 6, 2,}{8, 7, 5, 4, 3, 1} 

{12, 11, 10, 6, 5, 3}{13, 12, 11, 8, 6, 3}{11, 10, 9, 8, 7, 5}{11, 7, 6, 5, 4, 3}{12, 11, 8, 4, 3, 2} 

{11, 9, 7, 4, 2, 1}{13, 10, 8, 7, 6, 4}{13, 11, 9, 7, 6, 1}{11, 10, 9, 8, 4, 3}{13, 11, 9, 6, 4, 2, } 

{13, 11, 9, 8, 2} 

{11, 6, 5, 3, 2, 1} {12, 10, 7, 3, 2, 1}{7, 6, 5, 4, 2, 1}{12, 11, 8, 4, 2, 1}{12, 8, 6, 5, 2, 1} 

{11, 9, 7, 5, 2, 1}{11, 10, 9, 6, 2, 1} {12, 11, 5, 4, 3, 1}{12, 9, 7, 5, 3, 1}{13, 10, 8, 6, 3, 1} 

{13, 12, 11, 10, 3, 1}{9, 8, 7, 6, 4, 1}{13, 10, 9, 6, 4, 1}{13, 12, 10, 6, 5, 1} {13, 12, 9, 8, 6, 1} 
{9, 8, 6, 5, 3, 2}{13, 9, 8, 7, 3, 2}{13, 11, 8, 7, 4, 2} {13, 10, 8, 7, 5, 3}{13, 11, 8, 7, 6, 3} 

{10, 8, 7, 5, 4, 2}{13, 12, 7, 5, 4, 2}{11, 10, 9, 5, 4, 2}{13, 11, 10, 9, 8, 2} {12, 11, 9, 7, 6, 2} 

{11, 8, 6, 5, 4, 3}{12, 10, 9, 5, 4, 3}{11, 10, 8, 7, 4, 3}{11, 9, 7, 6, 5, 3}{13, 12, 11, 9, 2, 1} 
{3, 9, 6, 5, 2, 1} {10, 9, 8, 7, 3, 1}{13, 12, 10, 4, 3, 2}{12, 11, 10, 7, 6, 3}{13, 12, 10, 8, 6, 2} 

{10, 7, 6, 3, 2, 1}{11 8, 5, 4, 2, 1}{12, 10, 5, 4, 2, 1} {10, 8, 7, 4, 2, 1}{11, 7, 6, 5, 2, 1} 

{12, 9, 8, 7, 6, 5} {12, 9, 8, 6, 3, 1}{12, 8, 7, 5, 4, 1}{13, 10, 9, 7, 4, 1}{13, 12, 8, 6, 5, 1} 

{11, 10, 7, 4, 3, 2}{13, 12, 11, 10, 6, 5} {13, 11, 8, 4, 3, 2}{13, 11, 10, 6, 3, 2}{13, 12, 10, 8, 3, 2} 

{13, 11, 10, 8, 5, 2} {13, 12, 11, 9, 8, 2}{12, 9, 7, 5, 4, 3}{13, 12, 11, 7, 4, 3}{11, 10, 9, 8, 4, 3} 

{12, 11, 10, 9, 8, 7}{11, 10, 8, 6, 5, 4}{13, 8, 7, 6, 3, 1}{10, 9, 8, 7, 5, 3}{13, 6, 5, 4, 3, 1} 

{12, 10, 9, 5, 3, 2}{13, 10, 7, 6, 5, 2}{12, 11, 9, 8, 5, 1} 

{10, 9, 5, 3, 2, 1}{11, 10, 6, 3, 2, 1}{12, 10, 7, 4, 2, 1}{12, 9, 6, 5, 2, 1}{13, 11, 7, 5, 2, 1} 

{13, 8, 6, 4, 3, 1}{12, 11, 6, 5, 3, 1}{11, 9, 8, 5, 3, 1}{12, 11, 10, 5, 4, 1}{10, 8, 7, 6, 5, 1} 

{13, 12, 11, 8, 7, 1}{12, 6, 5, 4, 3, 2}{10, 9, 6, 4, 3, 2}{12, 10, 8, 5, 3, 2}{13, 12, 10, 7, 6, 1} 

{13, 11, 10, 5, 3, 2}{13, 9, 7, 6, 3, 2}{12, 11, 8, 7, 3, 2}{13, 12, 9, 7, 4, 2}{10, 9, 7, 6, 5, 2} 

{12, 10, 7, 5, 4, 3}{13, 11, 9, 6, 4, 3}{13, 12, 10, 8, 4, 3}{13, 11, 9, 4, 2, 1}{13, 12, 10, 9, 5, 1} 

{11, 10, 7, 6, 5, 3} {13, 12, 8, 6, 2, 1}{13, 12, 11, 9, 6, 5} {13, 12, 8, 6, 5, 4}{13, 12, 11, 10, 9, 2} 

{13, 12, 9, 7, 5, 3} 

{12, 10, 6, 3, 2, 1}{10, 8, 7, 3, 2, 1}{8, 6, 5, 4, 2, 1}{11, 9, 8, 5, 2, 1}{12, 11, 9, 6, 2, 1} 

{13, 12, 11, 6, 4, 1}{10, 8, 7, 6, 5, 1}{12, 9, 8, 7, 6, 1}{12, 11, 10, 8, 6, 1}{9, 7, 6, 5, 3, 2} 

{12, 9, 6, 5, 4, 2}{13, 9, 8, 6, 5, 2}{13, 9, 7, 5, 4, 3}{12, 11, 8, 5, 4, 3}{9, 8, 7, 6, 4, 3} 

{12, 11, 9, 6, 5, 3}{13, 11, 10, 8, 7, 3}{13, 10, 8, 7, 5, 4}{13, 11, 9, 8, 5, 4}{11, 9, 7, 5, 4, 1} 

{13, 12, 10, 9, 8, 6}{13, 12, 8, 5, 3, 1}{13, 12, 9, 5, 3, 2}{11, 10, 7, 6, 4, 3}{12, 11, 9, 8, 4, 1} 

{13, 12, 4, 3, 2, 1}{13, 10, 9, 3, 2, 1}{11, 10, 6, 4, 2, 1}{7, 6, 5, 4, 3, 1}{13, 8, 5, 4, 3, 1} 
{9, 8, 5, 4, 2, 1}{11, 9, 8, 4, 3, 1}{12, 11, 9, 7, 4, 1}{10, 9, 7, 6, 5, 1}{12, 11, 10, 9, 6, 1} 

{10, 9, 7, 4, 3, 2}{12, 10, 8, 5, 4, 2}{13, 12, 11, 6, 4, 2}{13, 11, 10, 7, 4, 2}{13, 12, 9, 8, 5, 2} 

{10, 9, 8, 6, 4, 3}{12, 11, 8, 7, 4, 3}{13, 12, 10, 9, 7, 3}{13, 12, 11, 10, 9, 5}{13, 9, 7, 4, 3, 1} 

{10, 6, 5, 4, 3, 2}{13, 9, 8, 7, 6, 2} 

{13, 8, 4, 3, 2, 1}{10, 8, 5, 3, 2, 1}{12, 10, 9, 5, 2, 1}{12, 11, 9, 6, 2, 1}{10, 9, 7, 4, 3, 1} 

{13, 10, 7, 5, 3, 1}{13, 9, 8, 7, 3, 1}{12, 11, 8, 7, 6, 1}{12, 11, 10, 8, 3, 2}{11, 9, 8, 5, 4, 2} 

{13, 11, 7, 6, 5, 2}{11, 10, 9, 6, 5, 2}{13, 12, 8, 7, 5, 2}{13, 11, 10, 9, 7, 2}{11, 10, 8, 6, 4, 3} 

{12, 10, 9, 8, 6, 4}{13, 12, 9, 8, 5, 4}{12, 11, 10, 7, 5, 3}{13, 11, 10, 8, 4, 2}{13, 12, 9, 4, 3, 1} 

{12, 8, 7, 6, 5, 3} 

{9, 7, 6, 3, 2, 1}{13, 11, 10, 3, 2, 1}{13, 10, 5, 4, 2, 1}{13, 7, 6, 5, 2, 1}{10, 9, 6, 5, 2, 1} 

{12, 11, 7, 5, 3, 1}{10, 9, 7, 5, 4, 1}{12, 11, 8, 5, 4, 1}{9, 6, 5, 4, 3, 2}{11, 9, 7, 5, 3, 2} 

{13, 10, 8, 6, 5, 2}{11, 8, 6, 5, 4, 3}{13, 12, 10, 5, 4, 3}{13, 9, 8, 7, 4, 3}{12, 8, 7, 6, 5, 3} 

{13, 11, 9, 8, 5, 4}{12, 11, 10, 7, 6, 4}{13, 11, 10, 9, 6, 5}{13, 11, 10, 8, 7, 6}{13, 12, 10, 8, 2, 1} 

{12, 8, 7, 6, 4, 2}{13, 12, 9, 7, 5, 3} 

{12, 5, 4, 3, 2, 1}{13, 7, 4, 3, 2, 1}{8, 7, 6, 4, 2, 1}{12, 11, 7, 4, 2, 1}{13, 10, 5, 4, 3, 1} 

{13, 10, 7, 6, 3, 1}{13, 12, 9, 8, 4, 1}{12, 9, 8, 6, 5, 1}{11, 10, 9, 8, 5, 1}{13, 11, 8, 7, 6, 1} 

{12, 9, 8, 6, 3, 2}{11, 10, 9, 6, 3, 2}{13, 9, 7, 6, 4, 2}{12, 10, 9, 6, 4, 2}{12, 11, 10, 8, 4, 2} 

{13, 12, 10, 7, 5, 2}{9, 8, 7, 5, 4, 3}{13, 12, 10, 8, 4, 3}{12, 10, 9, 7, 5, 4}{11, 10, 9, 8, 7, 4} 

{10, 8, 6, 5, 3, 1}{12, 11, 7, 5, 3, 2}{12, 11, 10, 6, 5, 2} {13, 12, 11, 10, 9, 7} 



12 



89 


15 


{Iz, y, 0, 4, z, i/iy, o, O, o, z, iilivS, 11, 0, 4, o, l||lz, 11, o, o, o, 1||11, o, b, 0, 4, 1| 

{13, 7, 5, 4, 3, 2}{13, 11, 10, 8, 7, 3} {13, 11, 10, 4, 3, 2}{12, 10, 9, 5, 3, 2}{11, 10, 9, 6, 5, 2} 

{12, 8, 6, 5, 4, 3}{13, 12, 7, 6, 5, 3}{13, 12, 11, 10, 6, 3}{13, 12, 8, 5, 4, 1}{12, 11, 10, 7, 6, 2} 


97 


1 


fio 11 in /iT 
|lz, 11, lU, 0, 41 


101 


21 


{12, 10, 4, 3, 2, 1}{11, 10, 7, 3, 2, 1}{13, 9, 8, 3, 2, 1}{12, 10, 7, 5, 2, 1}{13, 10, 7, 6, 2, 1} 
{13, 11, 9, 8, 6, 3} {13, 12, 11, 7, 2., 1}{10, 7, 5, 4, 3, 1}{13, 11, 8, 4, 3, 1}{9, 7, 6, 5, 4, 1} 

fii in n 7 ^; iITiq ii t a /O Tio ii q 7 q olfiQ n a. k yi oTfiQ in n q ol 
{11, lU, y, 7, D, l|{lo, 11, 7, D, 0, 4| |lz, 11, o, 7, o, z|{lo, 9, D, 5, 4, z||lo, lU, y, o, b, z| 

{12. 11. 10. 8. 4. 3}|12. 10. 9, 6. o. 3}{13. 11. 10. 9. 8. 5|{11. 9. 8. 7. 2. 1}{12. 10. 9. 6. 4. 1} 

J r-i 111 ^ ( ; 1 '-; I 


103 


14 


|iu, 0, 4, ^, iu, b, 4, ^, ii, y, 4, ^, i>ii^, ii, », o, i^i^, <, o, 4, cs, i> 
{12, 11, 10, 7, 5, 4} {13, 10, 9, 5, 3, 2}{11, 10, 9, 5, 4, 2}{13, 12, 11, 9, 5, 2}{10, 9, 6, 5, 4, 3} 
{12, 9, 7, 6, 5, 3}{13, 11, 10, 8, 7, 4}{9, 8, 5, 4, 3, 2}{13, 12, 10, 5, 4, 3} 




1 o 


{13, 12, 10, 3, 2, 1}{10, 8, 6, 4, 2, 1}{12, 9, 8, 4, 2, 1}{12, 11, 7, 6, 2, 1}{13, 12, 7, 5, 4, 1} 

/ii in o Q fi i\Jii o c Q ol/i'i in 1 P. oI/iq io ii q q q1/io in q "7 c; /ii 
{11, lu, y, o, b, ij-^ii, y, o, 0, o, zj-^io, lu, /, o, o, zj-{io, iz, ii, y, o, oj-{iz, lu, y, *, o, 4j- 

{13, 12, 11, 10, 4, 1}{13, 9, 8, 7, 6, 5} 


iU ( 




{13, 12, 10, 3, 2, 1}{10, 8, 6, 4, 2, 1}{12, 9, 8, 4, 2, 1}{12, 11, 7, 6, 2, 1}{13, 12, 7, 5, 4, 1} 

Jii in O Q 1\J11 O Q ^ Q in 7 « 10 11 O Q in O 7 /ll. 

{11, lu, y, o, b, ij'{ii, y, o, 0, o, Zj'{io, lu, b, o, Zj'{io, iz, ii, y, o, -^^{iz, lu, y, /, o, 4j- 
{13, 12, 11, 10, 4, 1}{13, 9, 8, 7, 6, 5} 


1 no 


o 


{10, 9, 5, 4, 3, 1}{13, 12, 7, 4, 3, 1}{11, 10, 9, 7, 5, 1}{13, 11, 10, 8, 7, 1}{13, 12, 9, 7, 3, 2} 
{lu, o, b, 0, 4, oj-{io, IZ, y, o, 0, 4j-{iu, y, cs, *, o, oj-{i05 /, o, o, 4, oj- 


113 


1 


{13, 12, 7, 5, 2} 


1 07 
LZ I 


10 


fn R r; q o iIIiq ii n q o iI/iq io k /i o ilfii in q r: q i1/iq ii q 7 q il 

{y, D, o, o, z, ij-{io, 11, y, o, z, ij-{io5 iz, o, 4, z, ij^{ii, lu, o, o, o, ij-{io, ii, o, /, o, ij- 

/1Q in O Q "7 1\/1Q IO Q /t Q 0\/l Q Q Q Q 0\/lO 11 Q Q 0\/1 1 1 n Q c; /I 0\ 
{lo, lU, y, o, ( , lj-{105 IZ, o, 4, o, Zj-{io5 y, c5, 0, o, ZJ-{1Z, il, cS, O, o, Zj-{11, iU, fS, O, 4, Zj- 

{10, 9, 8, 5, 4, 3}{13, 8, 7, 6, 5, 3}{13, 11, 10, 9, 5, 4}{13, 12, 10, 8, 6, 4}{9, 8, 7, 6, 5, 1} 

{13, 12, 10, 9, 7, 2} 


131 


11 


/II ^1 K A O 1\/1Q Q A O l\/lO 11 O K O l\/0 C « A 0\/l'5 IO 11 in S 0\ 

{11, b, 0, 4, z, /^{lo, o, b, 4, z, ij'{iz, 11, y, o, z, ij'{y, o, b, 4, o, Zj-{io, iz, ii, lu, o, zj- 
{10, 8, 7, 6, 5, 3} {13, 11, 10, 7, 5, 3}{12, 11, 10, 9, 5, 3}{13, 10, 8, 7, 5, 4}{13, 11, 10, 8, 6, 4} 
{13, 12, 8, 7, 6, 5} 


137 


11 


/i'^ 19 in 7 i\/i'? 7 (\ A i\/ii 1 n s zi i\/i'? 11 1 n zi i/in s 7 o\ 

{12, 11, 10, 9, 7, 2}{10, 9, 7, 6, 5, 3}{13, 11, 7, 6, 5, 3}{13, 9, 8, 7, 6, 4}{12, 11, 9, 8, 6, 5} 

/II in Q s ^ 9\ 
-j^ii, lu, y. o, 0, zj 




1 n 


{13, 12, 8, 3, 2, 1}{9, 7, 6, 4, 2, 1}{13, 7, 6, 5, 3, 1}{12, 10, 9, 7, 3, 1}{11, 10, 9, 6, 5, 1} 

/II (\ A 9\/in Q R ■=» 4 91/1'^ 19 Q 7 4 ^1/1'^ 19 11 7 ^"l/S 7 R ^ A 9l 


149 




/IQ in f\ c; i\ 

^J-O, -LU, U, O, -Lj 






{10, 9, 8, 7, 2, 1}{11, 9, 8, 7, 3, 1}{13, 12, 10, 7, 6, 1}{12, 11, 9, 8, 6, 1}{11, 8, 6, 4, 3, 2} 

/II 1 n 7 R A 9\ /19 Q 7 R 9\/19 1 1 Q 7 9\/19 1(1 7 R A '?\/19 11 1(1 Q S '\\ 

{13, 12, 8, 7, 6, 4}{13, 10, 9, 8, 7, 5}{10, 9, 8, 4, 3, 2} 


-LO / 


lo 


{12, 9, 6, 3, 2, 1}{11, 7, 5, 4, 2, 1}{13, 8, 5, 4, 2, 1}{10, 7, 6, 5, 3, 1}{13, 11, 9, 7, 3, 1} 

/l'^ m 7 ^1 4 11./19 Q R ^ 9\/19 11 R 7 91/1"^ Q S R 4 "^"1/19 111 Q S R "XX 
^AO, AU, 1, o, 'i, Aj-^AZ, y, o, o, o, ^j-yLzi^ AA, o, 1, o, zj--|^Ao, y, o, u, 't, oj^Az, AU, y, O, U, Oj 

{13, 10, 8, 6, 5, 4}{13, 12, 11, 10, 6, 3}{11, 10, 9, 8, 3, 1} 


-LOO 


Q 


{11, 10, 7, 5, 3, 2}{13, 12, 11, 5, 3, 2}{9, 8, 6, 5, 4, 2}{11, 8, 7, 5, 4, 2}{13, 12, 7, 6, 4, 2} 

/II in Q R fi 9\/11 Q 7 /I '^1/1'^ 19 11 in Q Rl/l*^ 10 R 7 91. 
iAA, y, O, U, ZjiAA, y, (, U, ■^1, Oj^AO, AZ, AA, AU, y, VJj^AO, AVJ, O, 1, O, Zj 


1 fi7 


Q 


{12, 9, 6, 4, 2, 1}{13, 11, 6, 5, 2, 1}{12, 9, 7, 4, 3, 1}{12, 11, 10, 7, 3, 1}{13, 12, 7, 6, 4, 1} 

/19 11 1(1 Q R 9\/1 1 7^4 ^\/1^ 19 11 1(1 Q Rl /19 1 7 91 
^AZ, AA, AU, y, U, Zj"^AA, y, O, 'rt, Oj^AO, AZ, AA, AU, y, Oj -'-'-'1 '5 "^5 


173 


1 


{13, 12, 9, 7, 6} 


1 'TO 


o 
y 


{12, 11, 9, 3, 2, 1}{12, 10, 6, 5, 2, 1}{13, 8, 7, 5, 2, 1}{8, 7, 6, 5, 3, 1}{10, 9, 7, 6, 3, 1} 

/19 Q '7 ^ A Q\/1Q 11 in V A Q\/1Q 11 in T « f^\/l9 11 '7 « A ^\ 
{IZ, o, /, 0, 4, oj'{lo, 11, lU, /, 4, oj'{lo, 11, lU, /, b, ^/{IZ, 11, /, b, 4, Ij- 


181 


12 


{8, 5, 4, 3, 2, 1}{13, 11, 7, 4, 2, 1}{9, 8, 7, 6, 2, 1}{13, 11, 10, 8, 3, 1}{13, 12, 10, 6, 4, 1} 
{11, 9, 6, 5, 3, 2}{12, 11, 10, 7, 3, 2}{13, 9, 8, 7, 5, 2}{13, 12, 10, 8, 7, 2}{13, 11, 10, 9, 7, 3} 

/19 in Q 7 K /l\/0 7 A Q 0\ 
{IZ, lU, O, (, 0, 4j'{y, (, O, 4, o, Zj- 


191 


11 


{10, 7, 5, 3, 2, 1}{11, 7, 6, 4, 2, 1}{13, 10, 7, 4, 3, 1}{13, 11, 7, 6, 3, 1}{13, 12, 11, 9, 4, 1} 
{12, 10, 9, 6, 3, 2}{13, 8, 7, 6, 5, 4}{11, 10, 9, 7, 5, 4}{13, 12, 10, 8, 5, 4}{12, 11, 10, 8, 6, 4} 

TlQ IO 7 C Q ol 

{13, 12, 7, b, 3, 2> 


193 


7 


{12, 11, 10, 8, 2, 1}{11, 10, 8, 4, 3, 1}{13, 11, 5, 4, 3, 2}{10, 8, 7, 4, 3, 2}{11, 10, 8, 6, 3, 2} 
{12, 10, 9, 8, 7, 2}{13, 11, 8, 7, 6, 5} 


197 


11 


{11, 9, 5, 3, 2, 1}{12, 9, 8, 6, 2, 1}{12, 11, 10, 7, 2, 1}{13, 9, 7, 5, 3, 1}{11, 8, 7, 6, 3, 1} 
{12, 8, 7, 5, 4, 2}{13, 9, 7, 6, 5, 2}{12, 11, 7, 5, 4, 3}{12, 11, 10, 6, 4, 3}{13, 11, 10, 8, 5, 4} 

{13, 11, 8, 5, 3, 2} 


199 


9 


{13, 9, 4, 3, 2, 1}{13, 11, 8, 5, 2, 1}{13, 10, 8, 6, 4, 1}{11, 10, 9, 8, 7, 1}{12, 8, 6, 5, 4, 2} 
{12, 10, 7, 6, 5, 2} {10, 9, 8, 7, 5, 2}{12, 11, 10, 6, 5, 3} 
{12, 11, 10, 6, 4, 2} 








> 22787 




no privileged coalitions (proven) 



13 



